CVE-2026-124693

The Kendo UI for jQuery component (versions 2026.3.1015 up to but not including 2026.4.1110 ) contains a Cross-Site Scripting (XSS) vulnerability in the PivotGrid and PivotConfigurator components. The root cause is the lack of appropriate encoding when axis field names are passed to a chip templa...